Who we are

In Five Years (I5Y) is a Belgian recruitment agency that places candidates at SaaS startups and scale-ups in Engineering, Product and GTM roles. In Five Years is the data controller for the personal data collected through this website, our job board and our recruitment process.

Contact details

In Five Years BV
Belgradestraat 68, 2800 Mechelen, Belgium
BE1009.873.829

What data we collect, and why

You contact us via LinkedIn or apply for a vacancy
What data
Name, contact details, LinkedIn profile, CV
Purpose
Assessing your profile for the vacancy you contacted us about
Legal basis
Legitimate interest
You give us verbal consent by phone to add you to our candidate database
What data
The data above, plus notes from our conversations
Purpose
Matching you with current and future vacancies at our clients
Legal basis
Consent
You subscribe to our newsletter
What data
Email address
Purpose
Keeping you informed about relevant vacancies, usually quarterly
Legal basis
Consent
We introduce you to a client
What data
Your profile and CV
Purpose
Putting you forward for a specific vacancy
Legal basis
Legitimate interestWith your prior agreement on which client it is
You are placed with a client
What data
Name and placement details
Purpose
Invoicing and accounting
Legal basis
Performance of the contract and legal obligation

How long we keep your data

DataRetention period
Application without consent for the candidate databaseShortly after the recruitment process ends
Candidate database, after verbal consentUp to 2 years after our last contact with you; after that, we ask you to confirm again or delete your data
Newsletter subscriptionUntil you unsubscribe
Data of placed candidates7 years, as required by accounting law

If you’d like your data deleted sooner, you can ask at any time: see Your rights below.

Who we share your data with

Clients. We only introduce your profile to a specific employer after you’ve told us you agree with who that employer is.

Tools that process data on our behalf. We work with a number of external parties acting as processors. They may only use your data to enable our services, not for their own purposes.

ToolUsed forTransfers outside the EEA
NotionCandidate databaseStandard Contractual Clauses
Claude (Anthropic)AI-assisted matchingSee contract with Anthropic
ActiveCampaignNewsletterEU-US Data Privacy Framework and Standard Contractual Clauses
LovableInternal toolingSee Lovable’s Data Processing Agreement
N8NAutomation of internal processesNot applicable, self-hosted

We never share your data with third parties for commercial purposes.

Email tracking in our newsletter

Through ActiveCampaign, we can see whether you open our newsletter and whether you click a link in it. This happens through the newsletter itself (a pixel and trackable links), not through a cookie on our website. It helps us understand which vacancies interest you so we can follow up more relevantly. N8N processes this data further to run our internal workflows.

Since you already gave consent to receive the newsletter, this follow-up falls under that same consent. If you don’t want this, you can unsubscribe at any time: see Your rights below.

Use of AI in candidate matching

We use AI-assisted tools to help match profiles with vacancies. These tools give a recommendation but never make the final decision: one of our recruiters personally reviews every suggestion before you are introduced to a client or receive a rejection. If you’d like more explanation of how your profile was assessed, you can request it via the contact address below.

Your rights

You always have the right to:

  1. 01access the data we hold about you
  2. 02have incorrect data corrected
  3. 03have your data deleted
  4. 04withdraw your consent at any time, without affecting the lawfulness of earlier processing
  5. 05object to processing based on legitimate interest
  6. 06receive your data in a portable format

We respond to every request within one month. Contact us at privacy@infiveyears.com.

If you’re not satisfied with how we handled your request, you can file a complaint with the Belgian Data Protection Authority (Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be).

How we protect your data

Only our recruiters have access to the candidate database, through accounts with multi-factor authentication. We have an internal plan for data breaches: if there is a risk to your rights, we report it to the Data Protection Authority within the legal deadline and, where necessary, to you.

Contact

Questions about this policy or your data: privacy@infiveyears.com

You can also file complaints with the Belgian Data Protection Authority: see Your rights above.

Changes to this policy

We may update this policy from time to time, for example when our tools or working methods change.